Removed personal access token
Added URL and route to destroy session
Added loading dimmer
Changed authentication to authorization